Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          tODSzaxoQp6Tdl02rc0Itor4ZLMvN6Kto9lSz2lLZDA=
Subject key identifier:   FB:17:F7:35:34:C6:39:18:D3:10:6B:F0:21:6B:7E:38:4F:FA:01:5F
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          AA
Signing time:             Sun 19 May 2024 02:27:23 +0000
Manifest this update:     Sun 19 May 2024 02:27:23 +0000
Manifest next update:     Tue 21 May 2024 02:27:23 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: nvqGVT1zTd4uf167Z9ljBWTKMYRqpNJddqQ+O2eRnbE=)
                          2: 7D17B42896CB11EE95131775D25BE465.roa (hash: lyBR/cQIvWWlFcZm6KCvK7zlk6UMRx5/0YmgP37XBjY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: May 19 02:27:23 2024 GMT
            Not After : May 21 02:27:23 2024 GMT
        Subject: CN=6649638b-0f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:cd:af:43:f8:1b:d8:58:3d:28:13:e1:b9:
                    80:25:a9:27:cf:bc:27:fe:49:44:01:2b:05:ed:5f:
                    63:99:e5:ec:de:2b:d8:5c:3b:2e:8a:0a:c7:89:e9:
                    c1:5a:c0:c9:41:e7:4d:cc:1f:2a:b7:61:fc:f6:34:
                    a9:a0:97:c9:3b:52:d0:32:ad:7f:4a:3a:6e:9a:e8:
                    d3:da:b9:c7:d5:47:f3:90:99:48:4e:69:21:7c:48:
                    68:0e:fe:be:75:e1:d4:51:37:66:c2:d0:d3:ba:f2:
                    f1:32:4e:dd:fa:c2:57:34:b0:c0:a4:37:ec:ea:b1:
                    84:e4:08:6f:8b:01:8b:4c:60:85:83:85:48:cb:32:
                    18:11:55:55:71:56:3c:2c:a7:3d:06:54:5f:47:1c:
                    a0:d4:e2:a4:18:6a:de:18:df:2c:a0:b4:55:9a:2e:
                    f5:46:80:74:6d:de:9a:97:fe:07:48:ae:12:d2:8d:
                    57:c2:84:39:3d:3d:25:74:3b:8a:71:7c:c1:6a:38:
                    84:b4:31:71:31:76:52:56:f3:a3:bd:50:01:ff:4d:
                    1a:d6:11:06:13:c3:ae:87:73:99:8d:86:e5:43:fb:
                    40:b1:e4:ee:9b:db:dd:17:f0:9e:cb:22:99:38:c6:
                    c4:63:57:05:c1:85:62:d7:2d:0d:4d:4c:5c:00:73:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:17:F7:35:34:C6:39:18:D3:10:6B:F0:21:6B:7E:38:4F:FA:01:5F
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:f9:54:dd:7b:3b:f6:54:16:64:cb:83:91:ea:81:ea:77:
         97:ca:b5:2f:64:0b:9b:ad:b8:33:75:b8:23:e2:89:e4:ca:d1:
         7c:2c:6f:5a:76:16:57:23:ed:9a:0f:f1:8c:ac:74:fb:19:50:
         c1:f6:55:ec:c9:78:b9:97:86:3d:6f:0e:e9:24:c4:91:61:39:
         99:b6:e0:56:cd:ed:e2:b8:2c:0f:f0:21:84:45:5e:9b:4b:9a:
         b9:a2:ad:23:b7:14:b1:98:65:73:9b:d4:d3:3e:ea:ad:11:24:
         ec:6a:4b:4b:26:53:47:1f:6c:50:2d:26:aa:29:53:29:89:ca:
         ad:4f:56:99:59:2f:32:60:ce:24:df:9f:c4:5e:81:65:66:66:
         cb:a1:6f:55:05:5f:c3:8c:fd:c3:3e:27:93:80:1e:c6:a4:d6:
         a8:8c:af:7f:8a:d1:ef:a8:c4:da:c0:cc:dd:64:88:e5:f9:c5:
         24:99:d0:5c:03:64:f6:ec:55:01:66:21:c2:af:c6:ee:98:b0:
         aa:bf:1e:85:8c:88:48:1b:66:78:cf:83:58:d6:6b:50:8f:e5:
         6b:b1:c6:da:d0:f9:2e:b1:22:6f:ae:e0:de:eb:6a:fb:36:be:
         b0:0b:2b:28:b9:5f:4c:b1:3d:15:62:7f:2b:ef:0b:6d:0a:00:
         41:6b:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:11 2024 by rpki-client on console-ams.rpki-client.org